Threats tagged 'pysec-2025-102'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.6	EPSS 0.6%	CVE-2025-51481Dagster ge: Local File Inclusion Medium6.6EPSS 0.6%2025-07-22GCVE DatabaseCVE-2025-51481 A Local File Inclusion (LFI) vulnerability exists in Dagster version 1.10.14 and earlier versions, including several 0.10.x releases. The flaw is in the dagster._grpc.impl.get_notebook_data function, where attackers with access to the gRPC server can read arbitrary files by exploiting path traversal in the notebook_path field of ExternalNotebookData requests. This bypasses the intended extension-based file access checks. EPSS 0.6%Report on CVE-2025-51481 Vulnerability #pysec-2025-102 #pypi	GCVE Database	2025-07-22

Page 1 of 1